CVE-2014-5351

CVE-2014-5351 is a vulnerability in the kadm5_randkey_principal_3 function within the kadmind component of MIT Kerberos 5 versions prior to 1.13. This flaw allows remote authenticated users with administrative access to receive old keys when requesting a new random key with the -keepold option, potentially enabling them to forge Kerberos tickets. With a CVSS score of 2.1 (AV:N/AC:H/Au:S/C:P/I:N/A:N), this vulnerability has a low severity, requiring high attack complexity and authentication for a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.